css - Adding watermark to web page - architecture -


i curious adding watermarks web pages, e.g. logo of internet provider. i'm not asking code sample html or css. thinking proxy server add watermark web page user tries visit. how should proxy server behave when user asks https website? there other approaches apart proxy server try?

thanks answers

summary: don't want this.

there's 1 way luckily, , it's ugly, unreliable , insecure. have configure proxy act https terminator intercepts connections made client , create new connection destination site. can modify data before sending client.

however, client expects encrypted connection signed correct certificate. don't have certificate, browsers terminate connection or, if re-sign own certificate, complain invalid certificate. result in huge error messages on every client, that'll problem.

you can avoid installing new self-signed root certificate on client machines valid sites , sign data certificate. clients accept connection , happily display modified sites.

however, have broken chain of trust implied tls , you're solely responsible security between client , destination. when connect bank presence of tls ensures me a) connected real website of bank , b) no 1 can intercept my, example, login details. you've broken both , b, because no longer can trust i'm connected real website intended visit , or malicious third party can intercept , read traffic between me , bank abusing/hacking proxy server.

also, techniques http public key pinning both sites , browsers arming against firewall vendors, av companies , isp's bad ideas this. because that's is, bad idea.

please, please, don't this.


Comments

Post a Comment

Popular posts from this blog

angularjs - ADAL JS Angular- WebAPI add a new role claim to the token -

i have created angular spa webapi backend using adal js authentication.as there no roles in ad, need manually add role claims in order give users access different api controllers. the roles stored in database. expecting inject claim through call webapi after authentication ad. webapi code might this. identity.addclaim(new claim("role", "user")); var ticket = new authenticationticket(identity, props); var accesstoken = startup.oauthbeareroptions.accesstokenformat.protect(ticket); is possible replace adal idtoken new token? is viable solution or there other better way handle this? as initial token generated azuread, possible edit token add new claim? appreciated. graph api supporting group claims. see here: http://justazure.com/azure-active-directory-part-4-group-claims/ if @ examples on page, users assigned groups , app can check group in claims. in current version of portal, need app manifest , modify it.
Read more

php - CakePHP HttpSockets send array of paramms -

i problem when make request (i can request). $link = 'http://uri/path/?param1=1&sid=2&sid=3&sid=4' $http = $httpsocket = new httpsocket(); $res = $httpsocket->get($link); if check request pr($http); i see : [line] => /url/path/?param1=1&sid%5b0%5d=2&sid%5b1%5d=3&sid%5b2%5d=4 http/1.1 and i'm getting empty response because server doesn't know parameters sid%5b0%5d=2 when try send parameters array : $data = array('param1' => '1', 'sid' => array('2','3', '4')); i see same changes %5b0%5d - additional indexes. how fix it? unfortunately , can not change server side, if send request in browser, i'll normal response in json format. when make request, can parameters this: $param1 = $_get['param1']; $sid= $_get['sid']; tip: use diferente names parameters. have multiples sid. use sid1, sid2, sid3... update: can parameters this:
Read more

node.js - Using Node without global install -

i'm working on few node & electron (atom shell) projects , i'm curious how them work without user having install node globally. i've seen few applications including node directory in project contains node.exe binary. how go setting node project use binary? edit: thought should add, i've searched everywhere answer this, unrelated results.
Read more